Major Incidents or Breaches

  • Trust Wallet Chrome Extension Breach: Trust Wallet confirmed a security incident involving its Chrome extension, resulting in the theft of approximately $7 million in cryptocurrency. The breach was linked to a compromised extension update released on December 24. Users are being urged to update to the latest version immediately.

  • Grubhub-Themed Cryptocurrency Scam: Grubhub users received fraudulent emails purporting to be from the company, promising a tenfold return on sent cryptocurrency. The emails directed recipients to transfer funds to a specified wallet, indicating a targeted phishing campaign.

Newly Discovered Vulnerabilities

  • LangChain Core Critical Vulnerability: A critical vulnerability was disclosed in LangChain Core, allowing attackers to exploit serialization injection. This flaw can be used to steal sensitive secrets and manipulate large language model (LLM) responses through prompt injection techniques.

Notable Threat Actor Activity

  • China-Linked Evasive Panda DNS Poisoning Campaign: The China-linked APT group “Evasive Panda” conducted a targeted cyber espionage campaign using DNS poisoning to deliver MgBot malware. This operation leveraged manipulation of DNS requests to facilitate malware deployment.

Trends, Tools, or Tactics of Interest

  • Increased Use of AI Agents in Development: There is a growing trend of developers adopting AI agents for code generation. Security concerns have been raised about the integration of AI into development pipelines, with warnings that security must remain a priority as this trend accelerates into 2026.